December 2022 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2022:10254-1: important: Security update for opera
by opensuse-security＠opensuse.org 31 Dec '22

31 Dec '22

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10254-1 Rating: important References: Cross-References: CVE-2022-4262 CVE-2022-4436 CVE-2022-4437 CVE-2022-4438 CVE-2022-4439 CVE-2022-4440 CVSS scores: CVE-2022-4262 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4436 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4437 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4438 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4439 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4440 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.4:NonFree ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 94.0.4606.38 - CHR-9133 Update chromium on desktop-stable-108-4606 to 108.0.5359.125 - DNA-103624 Create JS API to open Search tabs feature - DNA-104004 Improve welcome pop-up - DNA-104053 Right mouse click open speed dial instead of context menu - DNA-104055 News article opens in active tab - DNA-104084 [Suggestion] Introduce a way to remove the Lucid Mode button - DNA-104089 No crashes reported in soccoro for Linux - The update to chromium 108.0.5359.125 fixes following issues: CVE-2022-4436, CVE-2022-4437, CVE-2022-4438, CVE-2022-4439, CVE-2022-4440 - Update to 94.0.4606.26 - CHR-9125 Update chromium on desktop-stable-108-4606 to 108.0.5359.99 - DNA-99207 WebUI popup/dropdown could be empty due to lack of memory - DNA-102882 [SD][News][Continue on][Suggestion] Do not focus on opened page when opening in new tab - DNA-103076 Release installer consent flow globally - DNA-103137 Fix positioning in Web UI component - DNA-103240 Re-use logic from popup for consent not set in settings - DNA-103540 Implement Autostart for Opera Desktop (except Poland) - DNA-103636 Implement Lucid Mode for Videos - DNA-103637 Implement Lucid Mode button on top of videos - DNA-103638 Make Lucid Mode button on top of videos work - DNA-103641 Implement Lucid Mode for Images - DNA-103642 Updated design and animation for Lucid Mode button on top of videos - DNA-103650 Add Lucid Mode to Easy Setup - DNA-103701 Move User Styles loading/saving to a separate component - DNA-103718 Record "consent_given" stat for every session - DNA-103724 Video detach button wont go away - DNA-103757 Add click animation for Lucid Mode button on top of videos - DNA-103765 Console error with lucid mode flag off - DNA-103770 Easy Setup switch doesn't get updated - DNA-103771 Click animation should only show when turning on Lucid Mode - DNA-103773 Unable to access lucid mode settings section directly - DNA-103784 Investigate video buttons 'escaping' - DNA-103800 Adapt Lucid Mode button to new design - DNA-103836 Translations for O94 - DNA-103850 Label on detach button cut off - DNA-103924 Popup windows of type TYPE_APP_POPUP have incorrectly set minimum size - DNA-103931 Wrong sidebar detection. - DNA-103935 Change Lucid Mode Video (Sharpen videos) to default off - DNA-103949 Lucid Mode doesn't work in a private window - DNA-103959 Unable to scroll down on player home page - DNA-103962 [Settings] Remove "Safety Check" - DNA-104011 Turn on Lucid Mode on all streams - DNA-104052 Hide Lucid Mode video button on Google Meet - DNA-103930 Promote O94 to stable - The update to chromium 108.0.5359.99 fixes following issues: CVE-2022-4262 - Update to 93.0.4585.64 - DNA-102836 Make 1st screen of Consent Popup a little taller to have more space under "You can adjust your choices" label - DNA-102934 Turn on building testlist on GOTH instead of Buildbot - DNA-102969 On some pages search popup don't work - DNA-103053 Put consent flow settings in separate feature flag - DNA-103054 Update consent settings to new design - DNA-103062 Add opauto tests for consent flow settings - DNA-103099 Set testlist_from in testlist generating script - DNA-103240 Re-use logic from popup for consent not set in settings - DNA-103296 Force dark page break QR code in whats app - DNA-103298 Stat for recording adblock whitelist is not sent in every session - DNA-103522 Missing translations for IDS_CONSENT_FLOW_DATA_DESC_INTERESTS - DNA-103526 search popup doesn't recognize some currencies shortcut - DNA-103530 Replace icons in sidebar setup - DNA-103636 Implement Lucid Mode for Videos - DNA-103637 Implement Lucid Mode button on top of videos - DNA-103638 Make Lucid Mode button on top of videos work - DNA-103641 Implement Lucid Mode for Images - DNA-103642 Updated design and animation for Lucid Mode button on top of videos - DNA-103650 Add Lucid Mode to Easy Setup - DNA-103701 Move User Styles loading/saving to a separate component - DNA-103718 Record "consent_given" stat for every session - DNA-103724 Video detach button wont go away - DNA-103757 Add click animation for Lucid Mode button on top of videos - DNA-103765 Console error with lucid mode flag off - DNA-103770 Easy Setup switch doesn't get updated - DNA-103771 Click animation should only show when turning on Lucid Mode - DNA-103773 Unable to access lucid mode settings section directly - DNA-103784 Investigate video buttons 'escaping' - DNA-103800 Adapt Lucid Mode button to new design - DNA-103850 Label on detach button cut off - DNA-103924 Popup windows of type TYPE_APP_POPUP have incorrectly set minimum size - DNA-103935 Change Lucid Mode Video (Sharpen videos) to default off - DNA-104011 Turn on Lucid Mode on all streams Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4:NonFree: zypper in -t patch openSUSE-2022-10254=1 Package List: - openSUSE Leap 15.4:NonFree (x86_64): opera-94.0.4606.38-lp154.2.35.1 References: https://www.suse.com/security/cve/CVE-2022-4262.html https://www.suse.com/security/cve/CVE-2022-4436.html https://www.suse.com/security/cve/CVE-2022-4437.html https://www.suse.com/security/cve/CVE-2022-4438.html https://www.suse.com/security/cve/CVE-2022-4439.html https://www.suse.com/security/cve/CVE-2022-4440.html

1 0

openSUSE-SU-2022:10257-1: important: Security update for mbedtls
by opensuse-security＠opensuse.org 31 Dec '22

31 Dec '22

openSUSE Security Update: Security update for mbedtls ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10257-1 Rating: important References: #1206576 Cross-References: CVE-2022-46393 CVSS scores: CVE-2022-46393 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-46393 (SUSE): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mbedtls fixes the following issues: - CVE-2022-46393: Fixed potential heap buffer overread and overwrite in DTLS (boo#1206576). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10257=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): libmbedcrypto7-2.28.0-bp154.2.3.1 libmbedtls14-2.28.0-bp154.2.3.1 libmbedx509-1-2.28.0-bp154.2.3.1 mbedtls-devel-2.28.0-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (aarch64_ilp32): libmbedcrypto7-64bit-2.28.0-bp154.2.3.1 libmbedtls14-64bit-2.28.0-bp154.2.3.1 libmbedx509-1-64bit-2.28.0-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (x86_64): libmbedcrypto7-32bit-2.28.0-bp154.2.3.1 libmbedtls14-32bit-2.28.0-bp154.2.3.1 libmbedx509-1-32bit-2.28.0-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-46393.html https://bugzilla.suse.com/1206576

1 0

openSUSE-RU-2022:10256-1: important: Recommended update for virtualbox
by maintenance＠opensuse.org 31 Dec '22

31 Dec '22

openSUSE Recommended Update: Recommended update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10256-1 Rating: important References: #1206651 Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for virtualbox fixes the following issues: - To eliminate some VM failures while using the kernel version of vboxvideo.ko for Leap 15.4, the build of this module is turned on again. (boo#1206651) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-2022-10256=1 Package List: - openSUSE Leap 15.3 (noarch): virtualbox-guest-desktop-icons-7.0.4-lp153.2.52.1 virtualbox-guest-source-7.0.4-lp153.2.52.1 virtualbox-host-source-7.0.4-lp153.2.52.1 - openSUSE Leap 15.3 (x86_64): python3-virtualbox-7.0.4-lp153.2.52.1 python3-virtualbox-debuginfo-7.0.4-lp153.2.52.1 virtualbox-7.0.4-lp153.2.52.1 virtualbox-debuginfo-7.0.4-lp153.2.52.1 virtualbox-debugsource-7.0.4-lp153.2.52.1 virtualbox-devel-7.0.4-lp153.2.52.1 virtualbox-guest-tools-7.0.4-lp153.2.52.1 virtualbox-guest-tools-debuginfo-7.0.4-lp153.2.52.1 virtualbox-kmp-debugsource-7.0.4-lp153.2.52.1 virtualbox-kmp-default-7.0.4_k5.3.18_150300.59.106-lp153.2.52.1 virtualbox-kmp-default-debuginfo-7.0.4_k5.3.18_150300.59.106-lp153.2.52.1 virtualbox-kmp-preempt-7.0.4_k5.3.18_150300.59.106-lp153.2.52.1 virtualbox-kmp-preempt-debuginfo-7.0.4_k5.3.18_150300.59.106-lp153.2.52.1 virtualbox-qt-7.0.4-lp153.2.52.1 virtualbox-qt-debuginfo-7.0.4-lp153.2.52.1 virtualbox-vnc-7.0.4-lp153.2.52.1 virtualbox-websrv-7.0.4-lp153.2.52.1 virtualbox-websrv-debuginfo-7.0.4-lp153.2.52.1 References: https://bugzilla.suse.com/1206651

1 0

openSUSE-SU-2022:10255-1: important: Security update for vlc
by opensuse-security＠opensuse.org 31 Dec '22

31 Dec '22

openSUSE Security Update: Security update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10255-1 Rating: important References: #1200944 #1206142 Cross-References: CVE-2022-41325 CVSS scores: CVE-2022-41325 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for vlc fixes the following issues: - Update to version 3.0.18 (CVE-2022-41325, boo#1206142): + macOS: Fix audio device listing with non-latin names. + Misc: Fix rendering and performance issue with older GPUs. + Updated translations. - Changes from version 3.0.18-rc2: + Codec/Demux: - Add support for Y16 chroma. - Fix build of gme plugin. + Lua: - Fix script for vocaroo. - Fix script for youtube to allow throttled playback. + Service Discovery: Fix UPnP regression on Windows. + Video Output: Fix video placement with caopengllayer. + Misc: Fix password search in kwallet module. - Changes from version 3.0.18-rc: + Demux: - Major adaptive streaming update, notably for multiple timelies and webvtt. - Fix seeking with some fragmented MP4 files. - Add support for DVBSub inside MKV. - Fix some Flac files that could not be played. - Improve seeking in Ogg files. + Decoders: - Fix DxVA/D3D11 crashes on HEVC files with bogus references. - Fix libass storage size and crash. - Fix decoding errors on macOS hw decoding on some HEVC files. + Video Output: - Fix color regression with VAAPI/iOS and OpenGL output. - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV. - Fix Direct3d9 texture stretching. - Fix 10-bit accelerated video filters on macOS. + Playlist: Avoid playlist liveloop on failed/tiny items (temporize EOS bursts). + Misc: - Misc fixes for the extension UI on macOS. - Improve SMBv1 and SMBv2 behaviours. - Improve FTP compatibility. - Support RISC-V. - Fix AVI muxing for Windows Media Player compatibility. - Fix seeking speed on macOS. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10255=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le x86_64): libvlc5-3.0.18-bp154.2.3.1 libvlccore9-3.0.18-bp154.2.3.1 vlc-3.0.18-bp154.2.3.1 vlc-codec-gstreamer-3.0.18-bp154.2.3.1 vlc-devel-3.0.18-bp154.2.3.1 vlc-jack-3.0.18-bp154.2.3.1 vlc-noX-3.0.18-bp154.2.3.1 vlc-opencv-3.0.18-bp154.2.3.1 vlc-qt-3.0.18-bp154.2.3.1 vlc-vdpau-3.0.18-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): vlc-lang-3.0.18-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-41325.html https://bugzilla.suse.com/1200944 https://bugzilla.suse.com/1206142

1 0

SUSE-RU-2022:4645-1: moderate: Security update for postgresql14, postgresql15
by maintenance＠opensuse.org 31 Dec '22

31 Dec '22

SUSE Recommended Update: Security update for postgresql14, postgresql15 ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4645-1 Rating: moderate References: #1205300 Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Legacy Software 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for postgresql14, postgresql15 fixes the following issues: postgresql15 is shipped in version 15.1. * https://www.postgresql.org/about/news/2543/ * https://www.postgresql.org/docs/15/release-15-1.html Update to 15.0: * https://www.postgresql.org/about/news/p-2526/ * https://www.postgresql.org/docs/15/release-15.html postgresql14 was updated to 14.6. (bsc#1205300) * https://www.postgresql.org/about/news/2543/ * https://www.postgresql.org/docs/14/release-14-6.html The libpq5 and libecpg6 libraries are now provided by postgresql15. Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4645=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4645=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-4645=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-4645=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-4645=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-4645=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-4645=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-4645=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-4645=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-4645=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-4645=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-4645=1 - SUSE Linux Enterprise Module for Legacy Software 15-SP4: zypper in -t patch SUSE-SLE-Module-Legacy-15-SP4-2022-4645=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4645=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4645=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-4645=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-4645=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-4645=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-llvmjit-14.6-150200.5.20.2 postgresql14-llvmjit-debuginfo-14.6-150200.5.20.2 postgresql14-llvmjit-devel-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 postgresql14-test-14.6-150200.5.20.2 postgresql15-15.1-150200.5.3.2 postgresql15-contrib-15.1-150200.5.3.2 postgresql15-contrib-debuginfo-15.1-150200.5.3.2 postgresql15-debuginfo-15.1-150200.5.3.2 postgresql15-debugsource-15.1-150200.5.3.2 postgresql15-devel-15.1-150200.5.3.2 postgresql15-devel-debuginfo-15.1-150200.5.3.2 postgresql15-llvmjit-15.1-150200.5.3.2 postgresql15-llvmjit-debuginfo-15.1-150200.5.3.2 postgresql15-llvmjit-devel-15.1-150200.5.3.2 postgresql15-plperl-15.1-150200.5.3.2 postgresql15-plperl-debuginfo-15.1-150200.5.3.2 postgresql15-plpython-15.1-150200.5.3.2 postgresql15-plpython-debuginfo-15.1-150200.5.3.2 postgresql15-pltcl-15.1-150200.5.3.2 postgresql15-pltcl-debuginfo-15.1-150200.5.3.2 postgresql15-server-15.1-150200.5.3.2 postgresql15-server-debuginfo-15.1-150200.5.3.2 postgresql15-server-devel-15.1-150200.5.3.2 postgresql15-server-devel-debuginfo-15.1-150200.5.3.2 postgresql15-test-15.1-150200.5.3.2 - openSUSE Leap 15.4 (x86_64): libecpg6-32bit-15.1-150200.5.3.2 libecpg6-32bit-debuginfo-15.1-150200.5.3.2 libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 - openSUSE Leap 15.4 (noarch): postgresql-15-150400.4.6.2 postgresql-contrib-15-150400.4.6.2 postgresql-devel-15-150400.4.6.2 postgresql-docs-15-150400.4.6.2 postgresql-llvmjit-15-150400.4.6.2 postgresql-llvmjit-devel-15-150300.10.12.2 postgresql-plperl-15-150400.4.6.2 postgresql-plpython-15-150400.4.6.2 postgresql-pltcl-15-150400.4.6.2 postgresql-server-15-150400.4.6.2 postgresql-server-devel-15-150400.4.6.2 postgresql-test-15-150400.4.6.2 postgresql14-docs-14.6-150200.5.20.2 postgresql15-docs-15.1-150200.5.3.2 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-llvmjit-14.6-150200.5.20.2 postgresql14-llvmjit-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 postgresql14-test-14.6-150200.5.20.2 postgresql15-15.1-150200.5.3.2 postgresql15-contrib-15.1-150200.5.3.2 postgresql15-contrib-debuginfo-15.1-150200.5.3.2 postgresql15-debuginfo-15.1-150200.5.3.2 postgresql15-debugsource-15.1-150200.5.3.2 postgresql15-devel-15.1-150200.5.3.2 postgresql15-devel-debuginfo-15.1-150200.5.3.2 postgresql15-llvmjit-15.1-150200.5.3.2 postgresql15-llvmjit-debuginfo-15.1-150200.5.3.2 postgresql15-llvmjit-devel-15.1-150200.5.3.2 postgresql15-plperl-15.1-150200.5.3.2 postgresql15-plperl-debuginfo-15.1-150200.5.3.2 postgresql15-plpython-15.1-150200.5.3.2 postgresql15-plpython-debuginfo-15.1-150200.5.3.2 postgresql15-pltcl-15.1-150200.5.3.2 postgresql15-pltcl-debuginfo-15.1-150200.5.3.2 postgresql15-server-15.1-150200.5.3.2 postgresql15-server-debuginfo-15.1-150200.5.3.2 postgresql15-server-devel-15.1-150200.5.3.2 postgresql15-server-devel-debuginfo-15.1-150200.5.3.2 postgresql15-test-15.1-150200.5.3.2 - openSUSE Leap 15.3 (noarch): postgresql-15-150300.10.12.2 postgresql-contrib-15-150300.10.12.2 postgresql-devel-15-150300.10.12.2 postgresql-docs-15-150300.10.12.2 postgresql-llvmjit-15-150300.10.12.2 postgresql-plperl-15-150300.10.12.2 postgresql-plpython-15-150300.10.12.2 postgresql-pltcl-15-150300.10.12.2 postgresql-server-15-150300.10.12.2 postgresql-server-devel-15-150300.10.12.2 postgresql-test-15-150300.10.12.2 postgresql14-docs-14.6-150200.5.20.2 postgresql15-docs-15.1-150200.5.3.2 - openSUSE Leap 15.3 (x86_64): libecpg6-32bit-15.1-150200.5.3.2 libecpg6-32bit-debuginfo-15.1-150200.5.3.2 libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 - SUSE Manager Server 4.1 (noarch): postgresql-15-150200.4.18.6 postgresql-contrib-15-150200.4.18.6 postgresql-devel-15-150200.4.18.6 postgresql-docs-15-150200.4.18.6 postgresql-plperl-15-150200.4.18.6 postgresql-plpython-15-150200.4.18.6 postgresql-pltcl-15-150200.4.18.6 postgresql-server-15-150200.4.18.6 postgresql-server-devel-15-150200.4.18.6 postgresql14-docs-14.6-150200.5.20.2 - SUSE Manager Server 4.1 (x86_64): libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 - SUSE Manager Retail Branch Server 4.1 (x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 - SUSE Manager Retail Branch Server 4.1 (noarch): postgresql-15-150200.4.18.6 postgresql-contrib-15-150200.4.18.6 postgresql-devel-15-150200.4.18.6 postgresql-docs-15-150200.4.18.6 postgresql-plperl-15-150200.4.18.6 postgresql-plpython-15-150200.4.18.6 postgresql-pltcl-15-150200.4.18.6 postgresql-server-15-150200.4.18.6 postgresql-server-devel-15-150200.4.18.6 postgresql14-docs-14.6-150200.5.20.2 - SUSE Manager Proxy 4.1 (x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 - SUSE Manager Proxy 4.1 (noarch): postgresql-15-150200.4.18.6 postgresql-contrib-15-150200.4.18.6 postgresql-devel-15-150200.4.18.6 postgresql-docs-15-150200.4.18.6 postgresql-plperl-15-150200.4.18.6 postgresql-plpython-15-150200.4.18.6 postgresql-pltcl-15-150200.4.18.6 postgresql-server-15-150200.4.18.6 postgresql-server-devel-15-150200.4.18.6 postgresql14-docs-14.6-150200.5.20.2 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): postgresql-15-150200.4.18.6 postgresql-contrib-15-150200.4.18.6 postgresql-devel-15-150200.4.18.6 postgresql-docs-15-150200.4.18.6 postgresql-plperl-15-150200.4.18.6 postgresql-plpython-15-150200.4.18.6 postgresql-pltcl-15-150200.4.18.6 postgresql-server-15-150200.4.18.6 postgresql-server-devel-15-150200.4.18.6 postgresql14-docs-14.6-150200.5.20.2 - SUSE Linux Enterprise Server for SAP 15-SP2 (x86_64): libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): postgresql-15-150200.4.18.6 postgresql-contrib-15-150200.4.18.6 postgresql-devel-15-150200.4.18.6 postgresql-docs-15-150200.4.18.6 postgresql-plperl-15-150200.4.18.6 postgresql-plpython-15-150200.4.18.6 postgresql-pltcl-15-150200.4.18.6 postgresql-server-15-150200.4.18.6 postgresql-server-devel-15-150200.4.18.6 postgresql14-docs-14.6-150200.5.20.2 - SUSE Linux Enterprise Server 15-SP2-LTSS (x86_64): libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 - SUSE Linux Enterprise Server 15-SP2-BCL (noarch): postgresql-15-150200.4.18.6 postgresql-contrib-15-150200.4.18.6 postgresql-devel-15-150200.4.18.6 postgresql-docs-15-150200.4.18.6 postgresql-plperl-15-150200.4.18.6 postgresql-plpython-15-150200.4.18.6 postgresql-pltcl-15-150200.4.18.6 postgresql-server-15-150200.4.18.6 postgresql-server-devel-15-150200.4.18.6 postgresql14-docs-14.6-150200.5.20.2 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 postgresql15-contrib-15.1-150200.5.3.2 postgresql15-contrib-debuginfo-15.1-150200.5.3.2 postgresql15-debuginfo-15.1-150200.5.3.2 postgresql15-debugsource-15.1-150200.5.3.2 postgresql15-devel-15.1-150200.5.3.2 postgresql15-devel-debuginfo-15.1-150200.5.3.2 postgresql15-plperl-15.1-150200.5.3.2 postgresql15-plperl-debuginfo-15.1-150200.5.3.2 postgresql15-plpython-15.1-150200.5.3.2 postgresql15-plpython-debuginfo-15.1-150200.5.3.2 postgresql15-pltcl-15.1-150200.5.3.2 postgresql15-pltcl-debuginfo-15.1-150200.5.3.2 postgresql15-server-15.1-150200.5.3.2 postgresql15-server-debuginfo-15.1-150200.5.3.2 postgresql15-server-devel-15.1-150200.5.3.2 postgresql15-server-devel-debuginfo-15.1-150200.5.3.2 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (ppc64le): postgresql15-15.1-150200.5.3.2 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (noarch): postgresql-contrib-15-150400.4.6.2 postgresql-devel-15-150400.4.6.2 postgresql-docs-15-150400.4.6.2 postgresql-plperl-15-150400.4.6.2 postgresql-plpython-15-150400.4.6.2 postgresql-pltcl-15-150400.4.6.2 postgresql-server-15-150400.4.6.2 postgresql-server-devel-15-150400.4.6.2 postgresql14-docs-14.6-150200.5.20.2 postgresql15-docs-15.1-150200.5.3.2 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 postgresql15-contrib-15.1-150200.5.3.2 postgresql15-contrib-debuginfo-15.1-150200.5.3.2 postgresql15-debuginfo-15.1-150200.5.3.2 postgresql15-debugsource-15.1-150200.5.3.2 postgresql15-devel-15.1-150200.5.3.2 postgresql15-devel-debuginfo-15.1-150200.5.3.2 postgresql15-plperl-15.1-150200.5.3.2 postgresql15-plperl-debuginfo-15.1-150200.5.3.2 postgresql15-plpython-15.1-150200.5.3.2 postgresql15-plpython-debuginfo-15.1-150200.5.3.2 postgresql15-pltcl-15.1-150200.5.3.2 postgresql15-pltcl-debuginfo-15.1-150200.5.3.2 postgresql15-server-15.1-150200.5.3.2 postgresql15-server-debuginfo-15.1-150200.5.3.2 postgresql15-server-devel-15.1-150200.5.3.2 postgresql15-server-devel-debuginfo-15.1-150200.5.3.2 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (noarch): postgresql-contrib-15-150300.10.12.2 postgresql-devel-15-150300.10.12.2 postgresql-docs-15-150300.10.12.2 postgresql-plperl-15-150300.10.12.2 postgresql-plpython-15-150300.10.12.2 postgresql-pltcl-15-150300.10.12.2 postgresql-server-15-150300.10.12.2 postgresql-server-devel-15-150300.10.12.2 postgresql14-docs-14.6-150200.5.20.2 postgresql15-docs-15.1-150200.5.3.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x x86_64): postgresql14-llvmjit-14.6-150200.5.20.2 postgresql14-llvmjit-debuginfo-14.6-150200.5.20.2 postgresql14-llvmjit-devel-14.6-150200.5.20.2 postgresql14-test-14.6-150200.5.20.2 postgresql15-llvmjit-15.1-150200.5.3.2 postgresql15-llvmjit-debuginfo-15.1-150200.5.3.2 postgresql15-llvmjit-devel-15.1-150200.5.3.2 postgresql15-test-15.1-150200.5.3.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (noarch): postgresql-15-150400.4.6.2 postgresql-contrib-15-150400.4.6.2 postgresql-devel-15-150400.4.6.2 postgresql-docs-15-150400.4.6.2 postgresql-llvmjit-15-150400.4.6.2 postgresql-llvmjit-devel-15-150400.4.6.2 postgresql-plperl-15-150400.4.6.2 postgresql-plpython-15-150400.4.6.2 postgresql-pltcl-15-150400.4.6.2 postgresql-server-15-150400.4.6.2 postgresql-server-devel-15-150400.4.6.2 postgresql-test-15-150400.4.6.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): postgresql14-llvmjit-14.6-150200.5.20.2 postgresql14-llvmjit-debuginfo-14.6-150200.5.20.2 postgresql15-llvmjit-15.1-150200.5.3.2 postgresql15-llvmjit-debuginfo-15.1-150200.5.3.2 postgresql15-llvmjit-devel-15.1-150200.5.3.2 postgresql15-test-15.1-150200.5.3.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (noarch): postgresql-15-150300.10.12.2 postgresql-contrib-15-150300.10.12.2 postgresql-devel-15-150300.10.12.2 postgresql-docs-15-150300.10.12.2 postgresql-llvmjit-15-150300.10.12.2 postgresql-llvmjit-devel-15-150300.10.12.2 postgresql-plperl-15-150300.10.12.2 postgresql-plpython-15-150300.10.12.2 postgresql-pltcl-15-150300.10.12.2 postgresql-server-15-150300.10.12.2 postgresql-server-devel-15-150300.10.12.2 postgresql-test-15-150300.10.12.2 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (x86_64): postgresql14-test-14.6-150200.5.20.2 - SUSE Linux Enterprise Module for Legacy Software 15-SP4 (noarch): postgresql-llvmjit-15-150400.4.6.2 postgresql-llvmjit-devel-15-150300.10.12.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libpq5-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql15-15.1-150200.5.3.2 postgresql15-debuginfo-15.1-150200.5.3.2 postgresql15-debugsource-15.1-150200.5.3.2 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): postgresql-15-150400.4.6.2 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libpq5-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql15-15.1-150200.5.3.2 postgresql15-debuginfo-15.1-150200.5.3.2 postgresql15-debugsource-15.1-150200.5.3.2 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): postgresql-15-150300.10.12.2 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (x86_64): libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): postgresql-15-150200.4.18.6 postgresql-contrib-15-150200.4.18.6 postgresql-devel-15-150200.4.18.6 postgresql-docs-15-150200.4.18.6 postgresql-plperl-15-150200.4.18.6 postgresql-plpython-15-150200.4.18.6 postgresql-pltcl-15-150200.4.18.6 postgresql-server-15-150200.4.18.6 postgresql-server-devel-15-150200.4.18.6 postgresql14-docs-14.6-150200.5.20.2 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (x86_64): libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (noarch): postgresql-15-150200.4.18.6 postgresql-contrib-15-150200.4.18.6 postgresql-devel-15-150200.4.18.6 postgresql-docs-15-150200.4.18.6 postgresql-plperl-15-150200.4.18.6 postgresql-plpython-15-150200.4.18.6 postgresql-pltcl-15-150200.4.18.6 postgresql-server-15-150200.4.18.6 postgresql-server-devel-15-150200.4.18.6 postgresql14-docs-14.6-150200.5.20.2 - SUSE Enterprise Storage 7 (aarch64 x86_64): libecpg6-15.1-150200.5.3.2 libecpg6-debuginfo-15.1-150200.5.3.2 libpq5-15.1-150200.5.3.2 libpq5-debuginfo-15.1-150200.5.3.2 postgresql14-14.6-150200.5.20.2 postgresql14-contrib-14.6-150200.5.20.2 postgresql14-contrib-debuginfo-14.6-150200.5.20.2 postgresql14-debuginfo-14.6-150200.5.20.2 postgresql14-debugsource-14.6-150200.5.20.2 postgresql14-devel-14.6-150200.5.20.2 postgresql14-devel-debuginfo-14.6-150200.5.20.2 postgresql14-plperl-14.6-150200.5.20.2 postgresql14-plperl-debuginfo-14.6-150200.5.20.2 postgresql14-plpython-14.6-150200.5.20.2 postgresql14-plpython-debuginfo-14.6-150200.5.20.2 postgresql14-pltcl-14.6-150200.5.20.2 postgresql14-pltcl-debuginfo-14.6-150200.5.20.2 postgresql14-server-14.6-150200.5.20.2 postgresql14-server-debuginfo-14.6-150200.5.20.2 postgresql14-server-devel-14.6-150200.5.20.2 postgresql14-server-devel-debuginfo-14.6-150200.5.20.2 - SUSE Enterprise Storage 7 (x86_64): libpq5-32bit-15.1-150200.5.3.2 libpq5-32bit-debuginfo-15.1-150200.5.3.2 - SUSE Enterprise Storage 7 (noarch): postgresql-15-150200.4.18.6 postgresql-contrib-15-150200.4.18.6 postgresql-devel-15-150200.4.18.6 postgresql-docs-15-150200.4.18.6 postgresql-plperl-15-150200.4.18.6 postgresql-plpython-15-150200.4.18.6 postgresql-pltcl-15-150200.4.18.6 postgresql-server-15-150200.4.18.6 postgresql-server-devel-15-150200.4.18.6 postgresql14-docs-14.6-150200.5.20.2 References: https://bugzilla.suse.com/1205300

1 0

openSUSE-RU-2022:10258-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 31 Dec '22

31 Dec '22

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10258-1 Rating: moderate References: #1200002 #1200974 #1203731 #1204852 #1205623 #1206296 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 5.9. The full upstream changelog is available from: (boo#1206296) https://discuss.linuxcontainers.org/t/lxd-5-9-has-been-released/15907 + Network zones project feature Update to LXD 5.8. The full upstream changelog is available from: (boo#1205623) https://discuss.linuxcontainers.org/t/lxd-5-8-has-been-released/15686 + CPU hotplug in VMs + Device override on init and launch * Record volume creation date Update to LXD 5.7. The full upstream changelog is available from: (boo#1204852) https://discuss.linuxcontainers.org/t/lxd-5-7-has-been-released/15432 + ACME / Let��s Encrypt support + Cloud-init validation + Internal metrics + Cluster join tokens expiry + Proxy device hotplugging to VM Update to LXD 5.6. The full upstream changelog is available from: (boo#1203731) https://discuss.linuxcontainers.org/t/lxd-5-6-has-been-released/15191 LXD 5.6: + Grafana Loki support + Object storage on local storage pools + Infiniband support for virtual machines + Restricted network access in projects + instance-ready lifecycle event + Metric for total effective CPUs LXD 5.5: + Storage buckets (on Ceph) + Instance Ready state + Configurable BGP hold time + All projects queries for storage volumes + OOM kill counter in metrics * Database optimization LXD 5.4: + Load-balancers (OVN) + Bi-directional vsock interface (VM) * Changes to vsock API (LXD VMs) - Change to using systemd-sysusers - Update to LXD 5.3. The full upstream changelog is available from: (boo#1200974) https://discuss.linuxcontainers.org/t/lxd-5-3-has-been-released/14439 + Extended raw.qemu support + fscache support for cephfs storage pools - Update to LXD 5.2. The full upstream changelog is available from: (boo#1200002) https://discuss.linuxcontainers.org/t/lxd-5-2-has-been-released/14200 + VPD information in resources API * Cross-project profile copy * HTTP streaming support in /dev/lxd API * Use of server-side filtering in CLI * Ceph librbd for virtual machines Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10258=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 ppc64le s390x x86_64): lxd-5.9-bp154.2.3.1 - openSUSE Backports SLE-15-SP4 (noarch): lxd-bash-completion-5.9-bp154.2.3.1 References: https://bugzilla.suse.com/1200002 https://bugzilla.suse.com/1200974 https://bugzilla.suse.com/1203731 https://bugzilla.suse.com/1204852 https://bugzilla.suse.com/1205623 https://bugzilla.suse.com/1206296

1 0

openSUSE-RU-2022:10259-1: moderate: Recommended update for openSUSE-build-key
by maintenance＠opensuse.org 31 Dec '22

31 Dec '22

openSUSE Recommended Update: Recommended update for openSUSE-build-key ______________________________________________________________________________ Announcement ID: openSUSE-RU-2022:10259-1 Rating: moderate References: #1199184 Affected Products: openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openSUSE-build-key fixes the following issues: - added opensuse container key - added the new 4096 bit RSA openSUSE Tumbleweed key (boo#1199184) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-2022-10259=1 Package List: - openSUSE Leap 15.4 (noarch): openSUSE-build-key-1.0-lp154.3.3.1 References: https://bugzilla.suse.com/1199184

1 0

SUSE-SU-2022:4641-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 30 Dec '22

30 Dec '22

SUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4641-1 Rating: important References: #1206474 #1206750 Cross-References: CVE-2022-42852 CVE-2022-42856 CVE-2022-42863 CVE-2022-42867 CVE-2022-46691 CVE-2022-46692 CVE-2022-46698 CVE-2022-46699 CVE-2022-46700 CVSS scores: CVE-2022-42852 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-42852 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-42856 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-42856 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-42863 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-42863 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-42867 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-42867 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-46691 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-46691 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-46692 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2022-46692 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVE-2022-46698 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-46698 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2022-46699 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-46699 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-46700 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474). - CVE-2022-42852: Fixed disclosure of process memory by improved memory handling. - CVE-2022-42867: Fixed a use after free issue was addressed with improved memory management. - CVE-2022-46692: Fixed bypass of Same Origin Policy through improved state management. - CVE-2022-46698: Fixed disclosure of sensitive user information with improved checks. - CVE-2022-46699: Fixed an arbitrary code execution caused by memory corruption. - CVE-2022-46700: Fixed an arbitrary code execution caused by memory corruption. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4641=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2022-4641=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-4641=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2022-4641=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-4641=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2022-4641=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-4641=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2022-4641=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-4641=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2022-4641=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-4641=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2022-4641=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2022-4641=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2022-4641=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-4641=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2022-4641=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-4641=1 Package List: - openSUSE Leap 15.4 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 - SUSE Manager Server 4.2 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Manager Server 4.1 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 - SUSE Manager Retail Branch Server 4.2 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Manager Retail Branch Server 4.1 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Manager Proxy 4.2 (x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 - SUSE Manager Proxy 4.2 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Manager Proxy 4.1 (x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Manager Proxy 4.1 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Enterprise Storage 7.1 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150200.57.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-2.38.3-150200.57.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150200.57.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2-4_0-2.38.3-150200.57.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-2.38.3-150200.57.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150200.57.1 webkit2gtk3-debugsource-2.38.3-150200.57.1 webkit2gtk3-devel-2.38.3-150200.57.1 - SUSE Enterprise Storage 7 (noarch): libwebkit2gtk3-lang-2.38.3-150200.57.1 References: https://www.suse.com/security/cve/CVE-2022-42852.html https://www.suse.com/security/cve/CVE-2022-42856.html https://www.suse.com/security/cve/CVE-2022-42863.html https://www.suse.com/security/cve/CVE-2022-42867.html https://www.suse.com/security/cve/CVE-2022-46691.html https://www.suse.com/security/cve/CVE-2022-46692.html https://www.suse.com/security/cve/CVE-2022-46698.html https://www.suse.com/security/cve/CVE-2022-46699.html https://www.suse.com/security/cve/CVE-2022-46700.html https://bugzilla.suse.com/1206474 https://bugzilla.suse.com/1206750

1 0

SUSE-SU-2022:4639-1: Security update for polkit-default-privs
by opensuse-security＠opensuse.org 30 Dec '22

30 Dec '22

SUSE Security Update: Security update for polkit-default-privs ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4639-1 Rating: low References: #1206414 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for polkit-default-privs fixes the following issues: Update to version 13.2+20221216.a0c29e6: - backport usbguard actions (bsc#1206414). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4639=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4639=1 Package List: - openSUSE Leap 15.4 (noarch): polkit-default-privs-13.2+20221216.a0c29e6-150400.3.3.1 polkit-whitelisting-13.2+20221216.a0c29e6-150400.3.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): polkit-default-privs-13.2+20221216.a0c29e6-150400.3.3.1 References: https://bugzilla.suse.com/1206414

1 0

SUSE-RU-2022:4640-1: Recommended update for drbd-utils
by maintenance＠opensuse.org 30 Dec '22

30 Dec '22

SUSE Recommended Update: Recommended update for drbd-utils ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4640-1 Rating: low References: #1204276 Affected Products: SUSE Linux Enterprise High Availability 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for SUSE Manager Server 4.3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for drbd-utils fixes the following issue: - Remove crm-fence-peer.sh for drbd8 to avoid confusion with v9 (bsc#1204276) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4640=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4640=1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.3: zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2022-4640=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4640=1 - SUSE Linux Enterprise High Availability 15-SP4: zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2022-4640=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): drbd-utils-9.19.0-150400.3.6.1 drbd-utils-debuginfo-9.19.0-150400.3.6.1 drbd-utils-debugsource-9.19.0-150400.3.6.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): drbd-utils-9.19.0-150400.3.6.1 drbd-utils-debuginfo-9.19.0-150400.3.6.1 drbd-utils-debugsource-9.19.0-150400.3.6.1 - SUSE Linux Enterprise Module for SUSE Manager Server 4.3 (aarch64 ppc64le s390x x86_64): drbd-utils-9.19.0-150400.3.6.1 drbd-utils-debuginfo-9.19.0-150400.3.6.1 drbd-utils-debugsource-9.19.0-150400.3.6.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): drbd-utils-9.19.0-150400.3.6.1 drbd-utils-debuginfo-9.19.0-150400.3.6.1 drbd-utils-debugsource-9.19.0-150400.3.6.1 - SUSE Linux Enterprise High Availability 15-SP4 (aarch64 ppc64le s390x x86_64): drbd-utils-9.19.0-150400.3.6.1 drbd-utils-debuginfo-9.19.0-150400.3.6.1 drbd-utils-debugsource-9.19.0-150400.3.6.1 References: https://bugzilla.suse.com/1204276

1 0

SUSE-SU-2022:4636-1: moderate: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 29 Dec '22

29 Dec '22

SUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4636-1 Rating: moderate References: #1206653 Cross-References: CVE-2022-46874 Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Workstation Extension 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for MozillaThunderbird fixes the following issues: Update to version 102.6.1 * fixed: Remote content did not load in user-defined signatures * fixed: Addons that added new action buttons were not shown for addon upgrades, requiring removal and reinstall * fixed: Various stability improvements * CVE-2022-46874: Drag and Dropped Filenames could have been truncated to malicious extensions (bsc#1206653) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4636=1 - SUSE Linux Enterprise Workstation Extension 15-SP4: zypper in -t patch SUSE-SLE-Product-WE-15-SP4-2022-4636=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-4636=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): MozillaThunderbird-102.6.1-150200.8.99.1 MozillaThunderbird-debuginfo-102.6.1-150200.8.99.1 MozillaThunderbird-debugsource-102.6.1-150200.8.99.1 MozillaThunderbird-translations-common-102.6.1-150200.8.99.1 MozillaThunderbird-translations-other-102.6.1-150200.8.99.1 - SUSE Linux Enterprise Workstation Extension 15-SP4 (x86_64): MozillaThunderbird-102.6.1-150200.8.99.1 MozillaThunderbird-debuginfo-102.6.1-150200.8.99.1 MozillaThunderbird-debugsource-102.6.1-150200.8.99.1 MozillaThunderbird-translations-common-102.6.1-150200.8.99.1 MozillaThunderbird-translations-other-102.6.1-150200.8.99.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (aarch64 ppc64le s390x): MozillaThunderbird-102.6.1-150200.8.99.1 MozillaThunderbird-debuginfo-102.6.1-150200.8.99.1 MozillaThunderbird-debugsource-102.6.1-150200.8.99.1 MozillaThunderbird-translations-common-102.6.1-150200.8.99.1 MozillaThunderbird-translations-other-102.6.1-150200.8.99.1 References: https://www.suse.com/security/cve/CVE-2022-46874.html https://bugzilla.suse.com/1206653

1 0

SUSE-SU-2022:4635-1: moderate: Security update for conmon
by opensuse-security＠opensuse.org 29 Dec '22

29 Dec '22

SUSE Security Update: Security update for conmon ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4635-1 Rating: moderate References: #1200285 Cross-References: CVE-2022-1708 CVSS scores: CVE-2022-1708 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-1708 (SUSE): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Containers 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for conmon fixes the following issues: conmon was updated to version 2.1.5: * don't leak syslog_identifier * logging: do not read more that the buf size * logging: fix error handling * Makefile: Fix install for FreeBSD * signal: Track changes to get_signal_descriptor in the FreeBSD version * Packit: initial enablement Update to version 2.1.4: * Fix a bug where conmon crashed when it got a SIGCHLD update to 2.1.3: * Stop using g_unix_signal_add() to avoid threads * Rename CLI optionlog-size-global-max to log-global-size-max Update to version 2.1.2: * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 bsc#1200285) * journald: print tag and name if both are specified * drop some logs to debug level Update to version 2.1.0 * logging: buffer partial messages to journald * exit: close all fds >= 3 * fix: cgroup: Free memory_cgroup_file_path if open fails. Update to version 2.0.32 * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor. * exit_command: Fix: unset subreaper attribute before running exit command Update to version 2.0.31 * logging: new mode -l passthrough * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald * conmon: Fix: free userdata files before exec cleanup Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4635=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4635=1 - SUSE Linux Enterprise Module for Containers 15-SP4: zypper in -t patch SUSE-SLE-Module-Containers-15-SP4-2022-4635=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4635=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): conmon-2.1.5-150400.3.3.1 conmon-debuginfo-2.1.5-150400.3.3.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): conmon-2.1.5-150400.3.3.1 conmon-debuginfo-2.1.5-150400.3.3.1 - SUSE Linux Enterprise Module for Containers 15-SP4 (aarch64 ppc64le s390x x86_64): conmon-2.1.5-150400.3.3.1 conmon-debuginfo-2.1.5-150400.3.3.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): conmon-2.1.5-150400.3.3.1 conmon-debuginfo-2.1.5-150400.3.3.1 References: https://www.suse.com/security/cve/CVE-2022-1708.html https://bugzilla.suse.com/1200285

1 0

SUSE-SU-2022:4634-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 29 Dec '22

29 Dec '22

SUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4634-1 Rating: important References: #1206474 Cross-References: CVE-2022-42856 CVSS scores: CVE-2022-42856 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-42856 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4634=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-4634=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4634=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4634=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_1-0-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_1-0-debuginfo-2.38.3-150400.4.25.1 libjavascriptcoregtk-5_0-0-2.38.3-150400.4.25.1 libjavascriptcoregtk-5_0-0-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-5_0-0-2.38.3-150400.4.25.1 libwebkit2gtk-5_0-0-debuginfo-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-4_1-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-5_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-4_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-4_1-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-5_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2WebExtension-4_1-2.38.3-150400.4.25.1 typelib-1_0-WebKit2WebExtension-5_0-2.38.3-150400.4.25.1 webkit-jsc-4-2.38.3-150400.4.25.1 webkit-jsc-4-debuginfo-2.38.3-150400.4.25.1 webkit-jsc-4.1-2.38.3-150400.4.25.1 webkit-jsc-4.1-debuginfo-2.38.3-150400.4.25.1 webkit-jsc-5.0-2.38.3-150400.4.25.1 webkit-jsc-5.0-debuginfo-2.38.3-150400.4.25.1 webkit2gtk-4_0-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk-4_1-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-4_1-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk-5_0-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-5_0-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk3-debugsource-2.38.3-150400.4.25.1 webkit2gtk3-devel-2.38.3-150400.4.25.1 webkit2gtk3-minibrowser-2.38.3-150400.4.25.1 webkit2gtk3-minibrowser-debuginfo-2.38.3-150400.4.25.1 webkit2gtk3-soup2-debugsource-2.38.3-150400.4.25.1 webkit2gtk3-soup2-devel-2.38.3-150400.4.25.1 webkit2gtk3-soup2-minibrowser-2.38.3-150400.4.25.1 webkit2gtk3-soup2-minibrowser-debuginfo-2.38.3-150400.4.25.1 webkit2gtk4-debugsource-2.38.3-150400.4.25.1 webkit2gtk4-devel-2.38.3-150400.4.25.1 webkit2gtk4-minibrowser-2.38.3-150400.4.25.1 webkit2gtk4-minibrowser-debuginfo-2.38.3-150400.4.25.1 - openSUSE Leap 15.4 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_1-0-32bit-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-32bit-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-32bit-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-32bit-debuginfo-2.38.3-150400.4.25.1 - openSUSE Leap 15.4 (noarch): WebKit2GTK-4.0-lang-2.38.3-150400.4.25.1 WebKit2GTK-4.1-lang-2.38.3-150400.4.25.1 WebKit2GTK-5.0-lang-2.38.3-150400.4.25.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-5_0-0-2.38.3-150400.4.25.1 libjavascriptcoregtk-5_0-0-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-5_0-0-2.38.3-150400.4.25.1 libwebkit2gtk-5_0-0-debuginfo-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-5_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-5_0-2.38.3-150400.4.25.1 webkit2gtk-5_0-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-5_0-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk4-debugsource-2.38.3-150400.4.25.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_1-0-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_1-0-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-2.38.3-150400.4.25.1 libwebkit2gtk-4_1-0-debuginfo-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-4_1-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-4_1-2.38.3-150400.4.25.1 typelib-1_0-WebKit2WebExtension-4_1-2.38.3-150400.4.25.1 webkit2gtk-4_1-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-4_1-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk3-debugsource-2.38.3-150400.4.25.1 webkit2gtk3-devel-2.38.3-150400.4.25.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.38.3-150400.4.25.1 libjavascriptcoregtk-4_0-18-debuginfo-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-2.38.3-150400.4.25.1 libwebkit2gtk-4_0-37-debuginfo-2.38.3-150400.4.25.1 typelib-1_0-JavaScriptCore-4_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2-4_0-2.38.3-150400.4.25.1 typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150400.4.25.1 webkit2gtk-4_0-injected-bundles-2.38.3-150400.4.25.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.38.3-150400.4.25.1 webkit2gtk3-soup2-debugsource-2.38.3-150400.4.25.1 webkit2gtk3-soup2-devel-2.38.3-150400.4.25.1 References: https://www.suse.com/security/cve/CVE-2022-42856.html https://bugzilla.suse.com/1206474

1 0

SUSE-SU-2022:4630-1: important: Security update for systemd
by opensuse-security＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4630-1 Rating: important References: #1200723 #1203857 #1204423 #1205000 Cross-References: CVE-2022-4415 CVSS scores: CVE-2022-4415 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000). Bug fixes: - Support by-path devlink for multipath nvme block devices (bsc#1200723). - Set SYSTEMD_NSS_DYNAMIC_BYPASS=1 env var for dbus-daemon (bsc#1203857). - Restrict cpu rule to x86_64, and also update the rule files to make use of the "CONST{arch}" syntax (bsc#1204423). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4630=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4630=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4630=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2022-4630=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2022-4630=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2022-4630=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2022-4630=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2022-4630=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2022-4630=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-4630=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4630=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4630=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2022-4630=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2022-4630=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2022-4630=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): nss-mymachines-246.16-150300.7.57.1 nss-mymachines-debuginfo-246.16-150300.7.57.1 nss-resolve-246.16-150300.7.57.1 nss-resolve-debuginfo-246.16-150300.7.57.1 systemd-logger-246.16-150300.7.57.1 - openSUSE Leap 15.4 (x86_64): nss-mymachines-32bit-246.16-150300.7.57.1 nss-mymachines-32bit-debuginfo-246.16-150300.7.57.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 nss-myhostname-246.16-150300.7.57.1 nss-myhostname-debuginfo-246.16-150300.7.57.1 nss-mymachines-246.16-150300.7.57.1 nss-mymachines-debuginfo-246.16-150300.7.57.1 nss-resolve-246.16-150300.7.57.1 nss-resolve-debuginfo-246.16-150300.7.57.1 nss-systemd-246.16-150300.7.57.1 nss-systemd-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-logger-246.16-150300.7.57.1 systemd-network-246.16-150300.7.57.1 systemd-network-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - openSUSE Leap 15.3 (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev-devel-32bit-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 nss-myhostname-32bit-246.16-150300.7.57.1 nss-myhostname-32bit-debuginfo-246.16-150300.7.57.1 nss-mymachines-32bit-246.16-150300.7.57.1 nss-mymachines-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - openSUSE Leap 15.3 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Manager Server 4.2 (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Manager Server 4.2 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Manager Retail Branch Server 4.2 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Manager Proxy 4.2 (x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Manager Proxy 4.2 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): libsystemd0-246.16-150300.7.57.1 libsystemd0-debuginfo-246.16-150300.7.57.1 libudev-devel-246.16-150300.7.57.1 libudev1-246.16-150300.7.57.1 libudev1-debuginfo-246.16-150300.7.57.1 systemd-246.16-150300.7.57.1 systemd-container-246.16-150300.7.57.1 systemd-container-debuginfo-246.16-150300.7.57.1 systemd-coredump-246.16-150300.7.57.1 systemd-coredump-debuginfo-246.16-150300.7.57.1 systemd-debuginfo-246.16-150300.7.57.1 systemd-debugsource-246.16-150300.7.57.1 systemd-devel-246.16-150300.7.57.1 systemd-doc-246.16-150300.7.57.1 systemd-journal-remote-246.16-150300.7.57.1 systemd-journal-remote-debuginfo-246.16-150300.7.57.1 systemd-sysvinit-246.16-150300.7.57.1 udev-246.16-150300.7.57.1 udev-debuginfo-246.16-150300.7.57.1 - SUSE Enterprise Storage 7.1 (noarch): systemd-lang-246.16-150300.7.57.1 - SUSE Enterprise Storage 7.1 (x86_64): libsystemd0-32bit-246.16-150300.7.57.1 libsystemd0-32bit-debuginfo-246.16-150300.7.57.1 libudev1-32bit-246.16-150300.7.57.1 libudev1-32bit-debuginfo-246.16-150300.7.57.1 systemd-32bit-246.16-150300.7.57.1 systemd-32bit-debuginfo-246.16-150300.7.57.1 References: https://www.suse.com/security/cve/CVE-2022-4415.html https://bugzilla.suse.com/1200723 https://bugzilla.suse.com/1203857 https://bugzilla.suse.com/1204423 https://bugzilla.suse.com/1205000

1 0

SUSE-RU-2022:4632-1: moderate: Recommended update for lifecycle-data-sle-module-live-patching
by maintenance＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Recommended Update: Recommended update for lifecycle-data-sle-module-live-patching ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4632-1 Rating: moderate References: #1020320 Affected Products: SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15-SP1 SUSE Linux Enterprise High Performance Computing 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15-SP1 SUSE Linux Enterprise Module for Live Patching 15-SP2 SUSE Linux Enterprise Module for Live Patching 15-SP3 SUSE Linux Enterprise Module for Live Patching 15-SP4 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15-SP1 SUSE Linux Enterprise Server 15-SP2 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15-SP1 SUSE Linux Enterprise Server for SAP Applications 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lifecycle-data-sle-module-live-patching fixes the following issues: - Added data for 4_12_14-150000_150_101, 4_12_14-150000_150_104, 4_12_14-150100_197_123, 4_12_14-150100_197_126, 5_14_21-150400_24_21, 5_14_21-150400_24_28, 5_3_18-150200_24_129, 5_3_18-150200_24_134, 5_3_18-150300_59_93, 5_3_18-150300_59_98. (bsc#1020320) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4632=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4632=1 - SUSE Linux Enterprise Module for Live Patching 15-SP4: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2022-4632=1 - SUSE Linux Enterprise Module for Live Patching 15-SP3: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2022-4632=1 - SUSE Linux Enterprise Module for Live Patching 15-SP2: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2022-4632=1 - SUSE Linux Enterprise Module for Live Patching 15-SP1: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2022-4632=1 - SUSE Linux Enterprise Module for Live Patching 15: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-2022-4632=1 Package List: - openSUSE Leap 15.4 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - openSUSE Leap 15.3 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - SUSE Linux Enterprise Module for Live Patching 15-SP4 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - SUSE Linux Enterprise Module for Live Patching 15-SP3 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - SUSE Linux Enterprise Module for Live Patching 15-SP2 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - SUSE Linux Enterprise Module for Live Patching 15-SP1 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - SUSE Linux Enterprise Module for Live Patching 15 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 References: https://bugzilla.suse.com/1020320

1 0

SUSE-SU-2022:4633-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4633-1 Rating: moderate References: #1206309 Cross-References: CVE-2022-43552 CVSS scores: CVE-2022-43552 (SUSE): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Realtime Extension 15-SP3 openSUSE Leap 15.3 openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for curl fixes the following issues: - CVE-2022-43552: HTTP Proxy deny use-after-free (bsc#1206309). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4633=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4633=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2022-4633=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4633=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4633=1 Package List: - openSUSE Leap Micro 5.2 (aarch64 x86_64): curl-7.66.0-150200.4.45.1 curl-debuginfo-7.66.0-150200.4.45.1 curl-debugsource-7.66.0-150200.4.45.1 libcurl4-7.66.0-150200.4.45.1 libcurl4-debuginfo-7.66.0-150200.4.45.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): curl-7.66.0-150200.4.45.1 curl-debuginfo-7.66.0-150200.4.45.1 curl-debugsource-7.66.0-150200.4.45.1 libcurl-devel-7.66.0-150200.4.45.1 libcurl4-7.66.0-150200.4.45.1 libcurl4-debuginfo-7.66.0-150200.4.45.1 - openSUSE Leap 15.3 (x86_64): libcurl-devel-32bit-7.66.0-150200.4.45.1 libcurl4-32bit-7.66.0-150200.4.45.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.45.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): curl-7.66.0-150200.4.45.1 curl-debuginfo-7.66.0-150200.4.45.1 curl-debugsource-7.66.0-150200.4.45.1 libcurl-devel-7.66.0-150200.4.45.1 libcurl4-32bit-7.66.0-150200.4.45.1 libcurl4-32bit-debuginfo-7.66.0-150200.4.45.1 libcurl4-7.66.0-150200.4.45.1 libcurl4-debuginfo-7.66.0-150200.4.45.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): curl-7.66.0-150200.4.45.1 curl-debuginfo-7.66.0-150200.4.45.1 curl-debugsource-7.66.0-150200.4.45.1 libcurl4-7.66.0-150200.4.45.1 libcurl4-debuginfo-7.66.0-150200.4.45.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): curl-7.66.0-150200.4.45.1 curl-debuginfo-7.66.0-150200.4.45.1 curl-debugsource-7.66.0-150200.4.45.1 libcurl4-7.66.0-150200.4.45.1 libcurl4-debuginfo-7.66.0-150200.4.45.1 References: https://www.suse.com/security/cve/CVE-2022-43552.html https://bugzilla.suse.com/1206309

1 0

SUSE-SU-2022:4628-1: moderate: Security update for sqlite3
by opensuse-security＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4628-1 Rating: moderate References: #1206337 Cross-References: CVE-2022-46908 CVSS scores: CVE-2022-46908 (NVD) : 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L CVE-2022-46908 (SUSE): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqlite3 fixes the following issues: - CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism, when relying on --safe for execution of an untrusted CLI script (bsc#1206337). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4628=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4628=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4628=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4628=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2022-4628=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4628=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4628=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4628=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4628=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - openSUSE Leap Micro 5.2 (aarch64 x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-devel-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - openSUSE Leap 15.4 (x86_64): libsqlite3-0-32bit-3.39.3-150000.3.20.1 libsqlite3-0-32bit-debuginfo-3.39.3-150000.3.20.1 - openSUSE Leap 15.4 (noarch): sqlite3-doc-3.39.3-150000.3.20.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-devel-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - openSUSE Leap 15.3 (x86_64): libsqlite3-0-32bit-3.39.3-150000.3.20.1 libsqlite3-0-32bit-debuginfo-3.39.3-150000.3.20.1 - openSUSE Leap 15.3 (noarch): sqlite3-doc-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-32bit-3.39.3-150000.3.20.1 libsqlite3-0-32bit-debuginfo-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-devel-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-devel-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libsqlite3-0-32bit-3.39.3-150000.3.20.1 libsqlite3-0-32bit-debuginfo-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 sqlite3-tcl-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): libsqlite3-0-3.39.3-150000.3.20.1 libsqlite3-0-debuginfo-3.39.3-150000.3.20.1 sqlite3-debuginfo-3.39.3-150000.3.20.1 sqlite3-debugsource-3.39.3-150000.3.20.1 References: https://www.suse.com/security/cve/CVE-2022-46908.html https://bugzilla.suse.com/1206337

1 0

SUSE-RU-2022:4632-1: moderate: Recommended update for lifecycle-data-sle-module-live-patching
by maintenance＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Recommended Update: Recommended update for lifecycle-data-sle-module-live-patching ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4632-1 Rating: moderate References: #1020320 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lifecycle-data-sle-module-live-patching fixes the following issues: - Added data for 4_12_14-150000_150_101, 4_12_14-150000_150_104, 4_12_14-150100_197_123, 4_12_14-150100_197_126, 5_14_21-150400_24_21, 5_14_21-150400_24_28, 5_3_18-150200_24_129, 5_3_18-150200_24_134, 5_3_18-150300_59_93, 5_3_18-150300_59_98. (bsc#1020320) Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4632=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4632=1 Package List: - openSUSE Leap 15.4 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 - openSUSE Leap 15.3 (noarch): lifecycle-data-sle-module-live-patching-15-150000.4.84.1 References: https://bugzilla.suse.com/1020320

1 0

SUSE-SU-2022:4631-1: important: Security update for vim
by opensuse-security＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Security Update: Security update for vim ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4631-1 Rating: important References: #1204779 #1205797 #1206028 #1206071 #1206072 #1206075 #1206077 Cross-References: CVE-2022-3491 CVE-2022-3520 CVE-2022-3591 CVE-2022-3705 CVE-2022-4141 CVE-2022-4292 CVE-2022-4293 CVSS scores: CVE-2022-3491 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-3491 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2022-3520 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-3520 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-3591 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-3591 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-3705 (NVD) : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-3705 (SUSE): 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-4141 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4141 (SUSE): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H CVE-2022-4292 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4292 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2022-4293 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2022-4293 (SUSE): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.2 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for vim fixes the following issues: Updated to version 9.0.1040: - CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742 (bsc#1206028). - CVE-2022-3520: vim: Heap-based Buffer Overflow (bsc#1206071). - CVE-2022-3591: vim: Use After Free (bsc#1206072). - CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882 (bsc#1206075). - CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804 (bsc#1206077). - CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11 (bsc#1205797). - CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c (bsc#1204779). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4631=1 - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-4631=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4631=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4631=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2022-4631=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-4631=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2022-4631=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-4631=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2022-4631=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-4631=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2022-4631=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-4631=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2022-4631=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2022-4631=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-4631=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-4631=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2022-4631=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-4631=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4631=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4631=1 - SUSE Linux Enterprise Micro 5.2: zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-4631=1 - SUSE Linux Enterprise Micro 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-4631=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2022-4631=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2022-4631=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-4631=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-4631=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2022-4631=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-4631=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2022-4631=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - openSUSE Leap Micro 5.3 (noarch): vim-data-common-9.0.1040-150000.5.31.1 - openSUSE Leap Micro 5.2 (aarch64 x86_64): vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - openSUSE Leap Micro 5.2 (noarch): vim-data-common-9.0.1040-150000.5.31.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - openSUSE Leap 15.4 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - openSUSE Leap 15.3 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Manager Server 4.2 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Manager Server 4.1 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Retail Branch Server 4.2 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Manager Retail Branch Server 4.1 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Proxy 4.2 (x86_64): vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Manager Proxy 4.2 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Manager Proxy 4.1 (x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Manager Proxy 4.1 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.3 (noarch): vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64): vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.2 (noarch): vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64): vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise Micro 5.1 (noarch): vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 vim-small-9.0.1040-150000.5.31.1 vim-small-debuginfo-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 7.1 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 7 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 - SUSE Enterprise Storage 6 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE CaaS Platform 4.0 (noarch): vim-data-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 - SUSE CaaS Platform 4.0 (x86_64): gvim-9.0.1040-150000.5.31.1 gvim-debuginfo-9.0.1040-150000.5.31.1 vim-9.0.1040-150000.5.31.1 vim-debuginfo-9.0.1040-150000.5.31.1 vim-debugsource-9.0.1040-150000.5.31.1 References: https://www.suse.com/security/cve/CVE-2022-3491.html https://www.suse.com/security/cve/CVE-2022-3520.html https://www.suse.com/security/cve/CVE-2022-3591.html https://www.suse.com/security/cve/CVE-2022-3705.html https://www.suse.com/security/cve/CVE-2022-4141.html https://www.suse.com/security/cve/CVE-2022-4292.html https://www.suse.com/security/cve/CVE-2022-4293.html https://bugzilla.suse.com/1204779 https://bugzilla.suse.com/1205797 https://bugzilla.suse.com/1206028 https://bugzilla.suse.com/1206071 https://bugzilla.suse.com/1206072 https://bugzilla.suse.com/1206075 https://bugzilla.suse.com/1206077

1 0

SUSE-SU-2022:4629-1: important: Security update for systemd
by opensuse-security＠opensuse.org 28 Dec '22

28 Dec '22

SUSE Security Update: Security update for systemd ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4629-1 Rating: important References: #1200723 #1205000 Cross-References: CVE-2022-4415 CVSS scores: CVE-2022-4415 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 openSUSE Leap Micro 5.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000). Bug fixes: - Support by-path devlink for multipath nvme block devices (bsc#1200723). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.3: zypper in -t patch openSUSE-Leap-Micro-5.3-2022-4629=1 - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4629=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2022-4629=1 - SUSE Linux Enterprise Micro 5.3: zypper in -t patch SUSE-SLE-Micro-5.3-2022-4629=1 Package List: - openSUSE Leap Micro 5.3 (aarch64 x86_64): libsystemd0-249.12-150400.8.16.1 libsystemd0-debuginfo-249.12-150400.8.16.1 libudev1-249.12-150400.8.16.1 libudev1-debuginfo-249.12-150400.8.16.1 systemd-249.12-150400.8.16.1 systemd-container-249.12-150400.8.16.1 systemd-container-debuginfo-249.12-150400.8.16.1 systemd-debuginfo-249.12-150400.8.16.1 systemd-debugsource-249.12-150400.8.16.1 systemd-journal-remote-249.12-150400.8.16.1 systemd-journal-remote-debuginfo-249.12-150400.8.16.1 systemd-sysvinit-249.12-150400.8.16.1 udev-249.12-150400.8.16.1 udev-debuginfo-249.12-150400.8.16.1 - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libsystemd0-249.12-150400.8.16.1 libsystemd0-debuginfo-249.12-150400.8.16.1 libudev1-249.12-150400.8.16.1 libudev1-debuginfo-249.12-150400.8.16.1 nss-myhostname-249.12-150400.8.16.1 nss-myhostname-debuginfo-249.12-150400.8.16.1 nss-systemd-249.12-150400.8.16.1 nss-systemd-debuginfo-249.12-150400.8.16.1 systemd-249.12-150400.8.16.1 systemd-container-249.12-150400.8.16.1 systemd-container-debuginfo-249.12-150400.8.16.1 systemd-coredump-249.12-150400.8.16.1 systemd-coredump-debuginfo-249.12-150400.8.16.1 systemd-debuginfo-249.12-150400.8.16.1 systemd-debugsource-249.12-150400.8.16.1 systemd-devel-249.12-150400.8.16.1 systemd-doc-249.12-150400.8.16.1 systemd-experimental-249.12-150400.8.16.1 systemd-experimental-debuginfo-249.12-150400.8.16.1 systemd-journal-remote-249.12-150400.8.16.1 systemd-journal-remote-debuginfo-249.12-150400.8.16.1 systemd-network-249.12-150400.8.16.1 systemd-network-debuginfo-249.12-150400.8.16.1 systemd-portable-249.12-150400.8.16.1 systemd-portable-debuginfo-249.12-150400.8.16.1 systemd-sysvinit-249.12-150400.8.16.1 systemd-testsuite-249.12-150400.8.16.1 systemd-testsuite-debuginfo-249.12-150400.8.16.1 udev-249.12-150400.8.16.1 udev-debuginfo-249.12-150400.8.16.1 - openSUSE Leap 15.4 (x86_64): libsystemd0-32bit-249.12-150400.8.16.1 libsystemd0-32bit-debuginfo-249.12-150400.8.16.1 libudev1-32bit-249.12-150400.8.16.1 libudev1-32bit-debuginfo-249.12-150400.8.16.1 nss-myhostname-32bit-249.12-150400.8.16.1 nss-myhostname-32bit-debuginfo-249.12-150400.8.16.1 systemd-32bit-249.12-150400.8.16.1 systemd-32bit-debuginfo-249.12-150400.8.16.1 - openSUSE Leap 15.4 (noarch): systemd-lang-249.12-150400.8.16.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libsystemd0-249.12-150400.8.16.1 libsystemd0-debuginfo-249.12-150400.8.16.1 libudev1-249.12-150400.8.16.1 libudev1-debuginfo-249.12-150400.8.16.1 systemd-249.12-150400.8.16.1 systemd-container-249.12-150400.8.16.1 systemd-container-debuginfo-249.12-150400.8.16.1 systemd-coredump-249.12-150400.8.16.1 systemd-coredump-debuginfo-249.12-150400.8.16.1 systemd-debuginfo-249.12-150400.8.16.1 systemd-debugsource-249.12-150400.8.16.1 systemd-devel-249.12-150400.8.16.1 systemd-doc-249.12-150400.8.16.1 systemd-sysvinit-249.12-150400.8.16.1 udev-249.12-150400.8.16.1 udev-debuginfo-249.12-150400.8.16.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (noarch): systemd-lang-249.12-150400.8.16.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (x86_64): libsystemd0-32bit-249.12-150400.8.16.1 libsystemd0-32bit-debuginfo-249.12-150400.8.16.1 libudev1-32bit-249.12-150400.8.16.1 libudev1-32bit-debuginfo-249.12-150400.8.16.1 systemd-32bit-249.12-150400.8.16.1 systemd-32bit-debuginfo-249.12-150400.8.16.1 - SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64): libsystemd0-249.12-150400.8.16.1 libsystemd0-debuginfo-249.12-150400.8.16.1 libudev1-249.12-150400.8.16.1 libudev1-debuginfo-249.12-150400.8.16.1 systemd-249.12-150400.8.16.1 systemd-container-249.12-150400.8.16.1 systemd-container-debuginfo-249.12-150400.8.16.1 systemd-debuginfo-249.12-150400.8.16.1 systemd-debugsource-249.12-150400.8.16.1 systemd-journal-remote-249.12-150400.8.16.1 systemd-journal-remote-debuginfo-249.12-150400.8.16.1 systemd-sysvinit-249.12-150400.8.16.1 udev-249.12-150400.8.16.1 udev-debuginfo-249.12-150400.8.16.1 References: https://www.suse.com/security/cve/CVE-2022-4415.html https://bugzilla.suse.com/1200723 https://bugzilla.suse.com/1205000

1 0

SUSE-SU-2022:4626-1: important: Security update for freeradius-server
by opensuse-security＠opensuse.org 27 Dec '22

27 Dec '22

SUSE Security Update: Security update for freeradius-server ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4626-1 Rating: important References: #1206204 #1206205 #1206206 SLE-11203 Cross-References: CVE-2022-41859 CVE-2022-41860 CVE-2022-41861 CVSS scores: CVE-2022-41859 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-41860 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-41861 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes three vulnerabilities, contains one feature is now available. Description: This update for freeradius-server fixes the following issues: - CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204). - CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205). - CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206). - rebuild against the new net-snmp (jsc#SLE-11203). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4626=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-4626=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): freeradius-server-3.0.25-150400.4.4.1 freeradius-server-debuginfo-3.0.25-150400.4.4.1 freeradius-server-debugsource-3.0.25-150400.4.4.1 freeradius-server-devel-3.0.25-150400.4.4.1 freeradius-server-doc-3.0.25-150400.4.4.1 freeradius-server-krb5-3.0.25-150400.4.4.1 freeradius-server-krb5-debuginfo-3.0.25-150400.4.4.1 freeradius-server-ldap-3.0.25-150400.4.4.1 freeradius-server-ldap-debuginfo-3.0.25-150400.4.4.1 freeradius-server-ldap-schemas-3.0.25-150400.4.4.1 freeradius-server-libs-3.0.25-150400.4.4.1 freeradius-server-libs-debuginfo-3.0.25-150400.4.4.1 freeradius-server-mysql-3.0.25-150400.4.4.1 freeradius-server-mysql-debuginfo-3.0.25-150400.4.4.1 freeradius-server-perl-3.0.25-150400.4.4.1 freeradius-server-perl-debuginfo-3.0.25-150400.4.4.1 freeradius-server-postgresql-3.0.25-150400.4.4.1 freeradius-server-postgresql-debuginfo-3.0.25-150400.4.4.1 freeradius-server-python3-3.0.25-150400.4.4.1 freeradius-server-python3-debuginfo-3.0.25-150400.4.4.1 freeradius-server-sqlite-3.0.25-150400.4.4.1 freeradius-server-sqlite-debuginfo-3.0.25-150400.4.4.1 freeradius-server-utils-3.0.25-150400.4.4.1 freeradius-server-utils-debuginfo-3.0.25-150400.4.4.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): freeradius-server-3.0.25-150400.4.4.1 freeradius-server-debuginfo-3.0.25-150400.4.4.1 freeradius-server-debugsource-3.0.25-150400.4.4.1 freeradius-server-devel-3.0.25-150400.4.4.1 freeradius-server-krb5-3.0.25-150400.4.4.1 freeradius-server-krb5-debuginfo-3.0.25-150400.4.4.1 freeradius-server-ldap-3.0.25-150400.4.4.1 freeradius-server-ldap-debuginfo-3.0.25-150400.4.4.1 freeradius-server-libs-3.0.25-150400.4.4.1 freeradius-server-libs-debuginfo-3.0.25-150400.4.4.1 freeradius-server-mysql-3.0.25-150400.4.4.1 freeradius-server-mysql-debuginfo-3.0.25-150400.4.4.1 freeradius-server-perl-3.0.25-150400.4.4.1 freeradius-server-perl-debuginfo-3.0.25-150400.4.4.1 freeradius-server-postgresql-3.0.25-150400.4.4.1 freeradius-server-postgresql-debuginfo-3.0.25-150400.4.4.1 freeradius-server-python3-3.0.25-150400.4.4.1 freeradius-server-python3-debuginfo-3.0.25-150400.4.4.1 freeradius-server-sqlite-3.0.25-150400.4.4.1 freeradius-server-sqlite-debuginfo-3.0.25-150400.4.4.1 freeradius-server-utils-3.0.25-150400.4.4.1 freeradius-server-utils-debuginfo-3.0.25-150400.4.4.1 References: https://www.suse.com/security/cve/CVE-2022-41859.html https://www.suse.com/security/cve/CVE-2022-41860.html https://www.suse.com/security/cve/CVE-2022-41861.html https://bugzilla.suse.com/1206204 https://bugzilla.suse.com/1206205 https://bugzilla.suse.com/1206206

1 0

openSUSE-SU-2022:10252-1: important: Security update for vlc
by opensuse-security＠opensuse.org 27 Dec '22

27 Dec '22

openSUSE Security Update: Security update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10252-1 Rating: important References: #1200944 #1206142 Cross-References: CVE-2020-0499 CVE-2021-0561 CVE-2022-41325 CVSS scores: CVE-2020-0499 (NVD) : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2020-0499 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVE-2021-0561 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-0561 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-41325 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for vlc fixes the following issues: - Update to version 3.0.18 (CVE-2022-41325, boo#1206142): + macOS: Fix audio device listing with non-latin names. + Misc: Fix rendering and performance issue with older GPUs. + Updated translations. - Changes from version 3.0.18-rc2: + Codec/Demux: - Add support for Y16 chroma. - Fix build of gme plugin. + Lua: - Fix script for vocaroo. - Fix script for youtube to allow throttled playback. + Service Discovery: Fix UPnP regression on Windows. + Video Output: Fix video placement with caopengllayer. + Misc: Fix password search in kwallet module. - Changes from version 3.0.18-rc: + Demux: - Major adaptive streaming update, notably for multiple timelies and webvtt. - Fix seeking with some fragmented MP4 files. - Add support for DVBSub inside MKV. - Fix some Flac files that could not be played. - Improve seeking in Ogg files. + Decoders: - Fix DxVA/D3D11 crashes on HEVC files with bogus references. - Fix libass storage size and crash. - Fix decoding errors on macOS hw decoding on some HEVC files. + Video Output: - Fix color regression with VAAPI/iOS and OpenGL output. - Fix some resizing issues with OpenGL on GLX/EGL/X11/XV. - Fix Direct3d9 texture stretching. - Fix 10-bit accelerated video filters on macOS. + Playlist: Avoid playlist liveloop on failed/tiny items (temporize EOS bursts). + Misc: - Misc fixes for the extension UI on macOS. - Improve SMBv1 and SMBv2 behaviours. - Improve FTP compatibility. - Support RISC-V. - Fix AVI muxing for Windows Media Player compatibility. - Fix seeking speed on macOS. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10252=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 ppc64le s390x x86_64): libvlc5-3.0.18-bp153.2.6.1 libvlccore9-3.0.18-bp153.2.6.1 vlc-3.0.18-bp153.2.6.1 vlc-codec-gstreamer-3.0.18-bp153.2.6.1 vlc-devel-3.0.18-bp153.2.6.1 vlc-jack-3.0.18-bp153.2.6.1 vlc-noX-3.0.18-bp153.2.6.1 vlc-opencv-3.0.18-bp153.2.6.1 vlc-qt-3.0.18-bp153.2.6.1 vlc-vdpau-3.0.18-bp153.2.6.1 - openSUSE Backports SLE-15-SP3 (noarch): vlc-lang-3.0.18-bp153.2.6.1 References: https://www.suse.com/security/cve/CVE-2020-0499.html https://www.suse.com/security/cve/CVE-2021-0561.html https://www.suse.com/security/cve/CVE-2022-41325.html https://bugzilla.suse.com/1200944 https://bugzilla.suse.com/1206142

1 0

openSUSE-SU-2022:10253-1: moderate: Security update for multimon-ng
by opensuse-security＠opensuse.org 27 Dec '22

27 Dec '22

openSUSE Security Update: Security update for multimon-ng ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10253-1 Rating: moderate References: #1206542 Cross-References: CVE-2020-36619 Affected Products: openSUSE Backports SLE-15-SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for multimon-ng fixes the following issues: - Update to new upstream release 1.2.0 * Separated FLEX and FLEX_NEXT. The former is identical to 1.1.9, while FLEX_NEXT gained new features, as well as known regressions. (See #168) * Fix CVE-2020-36619 (boo#1206542) * Several smaller POCSAG fixes. * Fix for opening large wav files with improper header. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10253=1 Package List: - openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): multimon-ng-1.2.0-bp154.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-36619.html https://bugzilla.suse.com/1206542

1 0

SUSE-SU-2022:4622-1: important: Security update for freeradius-server
by opensuse-security＠opensuse.org 27 Dec '22

27 Dec '22

SUSE Security Update: Security update for freeradius-server ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4622-1 Rating: important References: #1206204 #1206205 #1206206 Cross-References: CVE-2022-41859 CVE-2022-41860 CVE-2022-41861 CVSS scores: CVE-2022-41859 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2022-41860 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-41861 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.1 SUSE Manager Server 4.2 openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for freeradius-server fixes the following issues: - CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204). - CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205). - CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-4622=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2022-4622=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-4622=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2022-4622=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-4622=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2022-4622=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-4622=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2022-4622=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-4622=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2022-4622=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-4622=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2022-4622=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2022-4622=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2022-4622=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-4622=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2022-4622=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-4622=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-doc-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Manager Proxy 4.2 (x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Manager Proxy 4.1 (x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): freeradius-server-3.0.21-150200.3.12.1 freeradius-server-debuginfo-3.0.21-150200.3.12.1 freeradius-server-debugsource-3.0.21-150200.3.12.1 freeradius-server-devel-3.0.21-150200.3.12.1 freeradius-server-krb5-3.0.21-150200.3.12.1 freeradius-server-krb5-debuginfo-3.0.21-150200.3.12.1 freeradius-server-ldap-3.0.21-150200.3.12.1 freeradius-server-ldap-debuginfo-3.0.21-150200.3.12.1 freeradius-server-libs-3.0.21-150200.3.12.1 freeradius-server-libs-debuginfo-3.0.21-150200.3.12.1 freeradius-server-mysql-3.0.21-150200.3.12.1 freeradius-server-mysql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-perl-3.0.21-150200.3.12.1 freeradius-server-perl-debuginfo-3.0.21-150200.3.12.1 freeradius-server-postgresql-3.0.21-150200.3.12.1 freeradius-server-postgresql-debuginfo-3.0.21-150200.3.12.1 freeradius-server-python3-3.0.21-150200.3.12.1 freeradius-server-python3-debuginfo-3.0.21-150200.3.12.1 freeradius-server-sqlite-3.0.21-150200.3.12.1 freeradius-server-sqlite-debuginfo-3.0.21-150200.3.12.1 freeradius-server-utils-3.0.21-150200.3.12.1 freeradius-server-utils-debuginfo-3.0.21-150200.3.12.1 References: https://www.suse.com/security/cve/CVE-2022-41859.html https://www.suse.com/security/cve/CVE-2022-41860.html https://www.suse.com/security/cve/CVE-2022-41861.html https://bugzilla.suse.com/1206204 https://bugzilla.suse.com/1206205 https://bugzilla.suse.com/1206206

1 0

SUSE-RU-2022:4623-1: moderate: Recommended update for rust, rust1.66
by maintenance＠opensuse.org 27 Dec '22

27 Dec '22

SUSE Recommended Update: Recommended update for rust, rust1.66 ______________________________________________________________________________ Announcement ID: SUSE-RU-2022:4623-1 Rating: moderate References: Affected Products: SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rust, rust1.66 fixes the following issues: This update ships rust 1.66. Version 1.66.0 (2022-12-15) ========================== Language -------- - Permit specifying explicit discriminants on all `repr(Int)` enums ```rust #[repr(u8)] enum Foo { A(u8) = 0, B(i8) = 1, C(bool) = 42, } ``` - Allow transmutes between the same type differing only in lifetimes - Change constant evaluation errors from a deny-by-default lint to a hard error - Trigger `must_use` on `impl Trait` for supertraits This makes `impl ExactSizeIterator` respect the existing `#[must_use]` annotation on `Iterator`. - Allow `..X` and `..=X` in patterns - Uplift `clippy::for_loops_over_fallibles` lint into rustc - Stabilize `sym` operands in inline assembly - Update to Unicode 15 - Opaque types no longer imply lifetime bounds This is a soundness fix which may break code that was erroneously relying on this behavior. Compiler -------- - Add armv5te-none-eabi and thumbv5te-none-eabi tier 3 targets - Refer to Rust's [platform support page][platform-support-doc] for more information on Rust's tiered platform support. - Add support for linking against macOS universal libraries Libraries --------- - Fix `#[derive(Default)]` on a generic `#[default]` enum adding unnecessary `Default` bounds - Update to Unicode 15 Stabilized APIs --------------- - `proc_macro::Span::source_text`](https://doc.rust-lang.org/stable/proc_macr o/struct.Span.html#method.source_text) - `uX::{checked_add_signed, overflowing_add_signed, saturating_add_signed, wrapping_add_signed}`](https://doc.rust-lang.org/stable/std/primitive.u8.ht ml#method.checked_add_signed) - `iX::{checked_add_unsigned, overflowing_add_unsigned, saturating_add_unsigned, wrapping_add_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8. html#method.checked_add_unsigned) - `iX::{checked_sub_unsigned, overflowing_sub_unsigned, saturating_sub_unsigned, wrapping_sub_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8. html#method.checked_sub_unsigned) - `BTreeSet::{first, last, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeSe t.html#method.first) - `BTreeMap::{first_key_value, last_key_value, first_entry, last_entry, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeMa p.html#method.first_key_value) - Add `AsFd` implementations for stdio lock types on WASI. - `impl TryFrom<Vec<T>> for Box<[T; N]>`](https://doc.rust-lang.org/stable/std/boxed/struct.Box.html#impl-TryFr om%3CVec%3CT%2C%20Global%3E%3E-for-Box%3C%5BT%3B%20N%5D%2C%20Global%3E) - `core::hint::black_box`](https://doc.rust-lang.org/stable/std/hint/fn.black _box.html) - `Duration::try_from_secs_{f32,f64}`](https://doc.rust-lang.org/stable/std/t ime/struct.Duration.html#method.try_from_secs_f32) - `Option::unzip`](https://doc.rust-lang.org/stable/std/option/enum.Option.ht ml#method.unzip) - `std::os::fd`](https://doc.rust-lang.org/stable/std/os/fd/index.html) Rustdoc ------- - Add Rustdoc warning for invalid HTML tags in the documentation Cargo ----- - Added `cargo remove` to remove dependencies from Cargo.toml](https://doc.rust-lang.org/nightly/cargo/commands/cargo-remove.h tml) - `cargo publish` now waits for the new version to be downloadable before exiting See [detailed release notes] for more. Compatibility Notes ------------------- - Only apply `ProceduralMasquerade` hack to older versions of `rental`] - Don't export `__heap_base` and `__data_end` on wasm32-wasi.] - Don't export `__wasm_init_memory` on WebAssembly.] - Only export `__tls_*` on wasm32-unknown-unknown.] - Don't link to `libresolv` in libstd on Darwin] - Update libstd's libc to 0.2.135 (to make `libstd` no longer pull in `libiconv.dylib` on Darwin)] - Opaque types no longer imply lifetime bounds] This is a soundness fix which may break code that was erroneously relying on this behavior. - Make `order_dependent_trait_objects` show up in future-breakage reports] - Change std::process::Command spawning to default to inheriting the parent's signal mask] Changes in rust: - Update to version 1.66.0 - for details see the rust1.66 package Patch Instructions: To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-4623=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-4623=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): cargo-1.66.0-150400.24.3.1 cargo1.66-1.66.0-150400.9.3.1 cargo1.66-debuginfo-1.66.0-150400.9.3.1 rust-1.66.0-150400.24.3.1 rust1.66-1.66.0-150400.9.3.1 rust1.66-debuginfo-1.66.0-150400.9.3.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): cargo-1.66.0-150400.24.3.1 cargo1.66-1.66.0-150400.9.3.1 cargo1.66-debuginfo-1.66.0-150400.9.3.1 rust-1.66.0-150400.24.3.1 rust1.66-1.66.0-150400.9.3.1 rust1.66-debuginfo-1.66.0-150400.9.3.1 References:

1 0